Now on Twitter

the unofficial HackerOne disclosure timeline.

X

XVIDEOS disclosed a bug submitted by alone_test 
Text injection or content spoofing on forbiden page

19 Sep 2021

Basecamp disclosed a bug submitted by nagli 
Subdomain Takeover due to NS records at us-east4.37signals.com

17 Sep 2021

Zomato disclosed a bug submitted by ian 
Subdomain takeover of fr1.vpn.zomans.com

17 Sep 2021

Mattermost disclosed a bug submitted by akashhamal0x01 
Account takeover due to misconfiguration

17 Sep 2021

Topcoder disclosed a bug submitted by 3viltwin 
SSRF to AWS file read

16 Sep 2021

Courier disclosed a bug submitted by bugera 
Session Fixiation allow attacker to create new evil workspace without being logged in [ Insecure Session management ]

16 Sep 2021

Courier disclosed a bug submitted by bugera 
[3] Bypassing IP Based Rate Limit Blocking leads to rate limit bypass in Courier Login Panel

16 Sep 2021

Zivver disclosed a bug submitted by dhirenkumar8280 
Bypassing Rate limit for forgot password by using different ip addresses

15 Sep 2021

curl disclosed a bug submitted by z2_ 
CVE-2021-22945: UAF and double-free in MQTT sending

15 Sep 2021

GitLab disclosed a bug submitted by joaxcar 
Stored XSS in main page of a project caused by arbitrary script payload in group "Default initial branch name"

15 Sep 2021

Revive Adserver disclosed a bug submitted by 418sec 
Use of a Broken or Risky Cryptographic Algorithm

15 Sep 2021

LINE disclosed a bug submitted by reinforchu 
Webview address bar spoofing in LINE client for iOS

15 Sep 2021

GitHub Security Lab disclosed a bug submitted by luchua 
[Java] CWE-079: Query to detect XSS with JavaServer Faces (JSF)

15 Sep 2021

Flickr disclosed a bug submitted by asad0x01_ 
CSRF in Account Deletion feature (https://www.flickr.com/account/delete)

14 Sep 2021

GitHub Security Lab disclosed a bug submitted by someone 
[Java]: Add XXE sinks

14 Sep 2021

Valve disclosed a bug submitted by slidybat 
Buffer overrun in Steam SILK voice decoder

13 Sep 2021

PortSwigger Web Security disclosed a bug submitted by thespiritman 
No Rate Limit On Regenerate Password on Portswigger

13 Sep 2021

Mattermost disclosed a bug submitted by fuzzsqlb0f 
Privilege Escalation leading to post in channel without having privilege

13 Sep 2021

Monero disclosed a bug submitted by thecharlatan 
Unix time unlock_time values have dangerous validation rules enabling a number of exploits

12 Sep 2021

Monero disclosed a bug submitted by thecharlatan 
Hardware Wallets Do Not Check Unlock TIme

12 Sep 2021

1 ... 3 4 5 6 7 ... 572

BY DENIS WERNER - @NOBBD - IMPRESSUM